Labelly AI — Privacy Policy

Last updated: October 1, 2025

Welcome to Labelly AI (the “App”). We care about your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. If you do not agree with this Policy, please do not use the App.

Quick Summary

  • You can scan nutrition facts, ingredients, or a barcode. Our AI analyzes the product and returns a score (0–100) plus pros/cons.
  • We store account and usage data to operate the service. Images you upload are processed to extract text and compute a score.
  • Purchases are processed by Apple; we never see your full payment card details.
  • We do not sell your data, and we do not use advertising SDKs.
  • You can request access, deletion, or export of your data at any time.
  • You may sign in with Apple or Google. We use Supabase to power authentication, database, and storage.

Who We Are

Controller/Operator: Labelly AI ("Company", "we", "us", "our").

Contact: labelly.aii@gmail.com. If you prefer postal mail, please contact us by email and we will provide a suitable mailing address.

Scope

This Policy covers the App currently available on iOS and any related in‑app services, websites, or support channels that link to this Policy (collectively, the “Service”).

Definitions

  • Account: Your Labelly AI user profile.
  • Content: Photos/images you upload (e.g., nutrition labels, ingredient lists), barcodes you scan, and any text you provide.
  • Derived Data: AI outputs such as the product score (0–100), extracted text, classifications, and explanations.
  • Personal Data: Information that identifies or can reasonably be linked to an individual.
  • Usage Data: Device, app, and diagnostics information generated by your use of the Service.

Information We Collect

1) Information You Provide

  • Account & Authentication: email address; name/alias; Apple or Google Sign‑In identifiers (if you choose those methods); Supabase user identifier; optional profile settings.
  • Content You Upload: photos of nutrition facts and ingredients; barcode data; optional notes you add to a scan.
  • Support & Feedback: messages you send to support.

2) Information Collected Automatically (Usage Data)

  • Device & App Data: device model, OS version, app version, language/region, time zone, IP address (for security and geolocation at country/city level), and unique app installation identifiers.
  • Interactions: screens viewed, buttons tapped, feature usage, and timestamps (to improve reliability and UX).
  • Crash/Diagnostics: crash logs and performance metrics.

3) Purchases & Subscriptions

  • Subscription Status: active/expired, product identifier, renewal dates, trial status, and country.
  • Payment Data: handled by Apple. We do not receive your full payment card details.

4) Derived Data from AI Processing

  • AI Results: score (0–100), extracted nutrition/ingredient text, ingredient flags, and explanatory notes.

Sensitive Inference Notice. Photos of labels and the resulting analysis may reveal dietary preferences or potential health-related interests. We handle such information with heightened care and use it only to provide the Service and improve its quality.

How We Use Your Information

  • Provide the Service: authenticate you; process images/barcodes; generate scores and explanations; sync your history; restore purchases.
  • Maintain & Improve: fix bugs; analyze usage patterns; enhance features and accuracy of recognition and scoring.
  • Communicate: send receipts, service announcements, and important updates; respond to support requests. (Marketing emails are opt‑in and include an unsubscribe link.)
  • Security & Fraud Prevention: detect abuse, enforce policies, and protect the Service.
  • Legal Compliance: comply with law and valid legal requests.

Sharing and Disclosure

We do not sell Personal Data. We share information as follows:

  • Service Providers (Processors) to operate core functions:
    • Apple (App Store billing, Sign in with Apple)
    • Google (Sign in with Google)
    • Subscription Management (e.g., RevenueCat) – to validate purchases and entitlements
    • Supabase (authentication, database, and file storage) – to manage accounts, sessions, and store scans/results
    • AI Inference Providers – to process images/text and generate scores; we contractually prohibit use of your data for model training and require strong security
    • Analytics & Crash Reporting (privacy‑respecting) – to understand app stability and usage (no ad tracking)
  • Professional Advisors (lawyers, auditors) under confidentiality
  • Business Transfers (merger, acquisition) with appropriate notice
  • Legal/Protection: to comply with the law; protect rights, safety, and security

We strive to minimize the data each vendor receives and apply Data Processing Agreements (DPAs), including Standard Contractual Clauses (SCCs) where applicable for international transfers.

Data Retention

  • Account Data: kept while your account is active. If you delete your account, we delete or anonymize associated Personal Data within a reasonable period, unless retention is required by law.
  • Scans & AI Results: retained so you can view history and for quality improvement; delete them at any time from within the App where available, or request deletion via support.
  • Diagnostics/Logs: typically retained for up to 24 months for security and reliability, unless a longer period is legally required.
  • Purchase Records: retained as required for tax, accounting, and compliance.

International Transfers

We may process and store data in countries outside your own. Where required, we use appropriate safeguards (e.g., SCCs) to protect your information.

Your Rights & Choices

Depending on your location, you may have the right to:

  • Access a copy of your Personal Data
  • Rectify inaccurate information
  • Delete your data (“Right to be Forgotten”)
  • Port your data in a commonly used format
  • Object/Restrict certain processing
  • Withdraw Consent where processing is based on consent

How to exercise: use in‑app controls (where available) or email labelly.aii@gmail.com. We may verify your request and respond within the time required by law.

Do Not Track / ATT

App Tracking Transparency (iOS): We do not use tracking for targeted advertising. Do Not Track (DNT) signals are not standardized; we nevertheless avoid advertising cookies/SDKs.

Children’s Privacy

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us and we will delete it.

Security

We employ administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, least‑privilege policies, and regular reviews. No system is 100% secure; please use strong authentication and keep your device updated.

Automated Decision‑Making & Profiling

Our AI computes a score (0–100) and highlights pros/cons based on the label data you submit. This is designed to support your decision‑making; it does not make legal or similarly significant decisions about you. You can always review inputs and ignore or delete results.

Third‑Party Links

The App may contain links to third‑party sites. We are not responsible for their privacy practices. Please review their policies.

Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you (e.g., in‑app notice or email) and update the “Last updated” date above. Your continued use after the effective date means you accept the revised Policy.

Contact Us

Questions or requests about this Policy? Email: labelly.aii@gmail.com